May 18, 2026 Fast16 malware has been reclassified as a precision tool engineered not to disrupt nuclear warheads directly, but to quietly falsify the outcome of nuclear weapons test simulations …
Grafana Labs Security Breach – Hackers Access GitHub and Download Codebase
May 17, 2026 A threat actor infiltrated Grafana Labs’ GitHub environment, stealing a privileged token to download the company’s private codebase, and then attempted to extort the open-source observability giant …
First Public macOS Kernel Exploit on Apple M5 Prepared Using Mythos Preview in Five Days
May 17, 2026 Apple’s M5 silicon has reportedly been exploited for the first time in a public macOS kernel memory corruption attack, successfully bypassing the company’s notable hardware-level memory protection. …
Microsoft Exchange, Windows 11, and Cursor Zero-Days Exploited on Pwn2Own Day 2
May 16, 2026 Pwn2Own Berlin 2026 is rapidly escalating into one of the most intense offensive security contests in recent years, with Day Two delivering a fresh wave of critical …
JDownloader Website Compromised to Distribute Malicious Windows and Linux Installers
May 16, 2026 A widely used download manager trusted by millions has briefly turned into a malware delivery platform after attackers compromised the official JDownloader website, replacing legitimate installers with …
Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities
May 16, 2026 Two critical memory-safety vulnerabilities in PHP’s image-processing functions could allow attackers to leak sensitive heap memory or to execute denial-of-service attacks via specially crafted JPEG files. The …
Linux Kernel Vulnerability “ssh-keysign-pwn” Lets Attackers Read SSH Keys and Shadow Passwords
A newly disclosed Linux kernel vulnerability is raising serious concerns across the security community, as it allows attackers to access highly sensitive data, including SSH private keys and password hashes, …
Google Project Zero Discloses Zero-Click Exploit Chain for Pixel 10 Devices
May 16, 2026 A newly disclosed zero-click exploit chain targeting Google Pixel 10 devices has raised fresh concerns about Android’s low-level security. Google Project Zero researchers demonstrated how attackers could …
Android 16 VPN Bypass Lets Malicious Apps Reveal Users Real IP Address
May 16, 2026 A newly disclosed flaw in Android 16 is raising serious privacy concerns after researchers revealed that malicious apps can bypass VPN protections and expose a user’s real …
Gunra Ransomware Expands RaaS Operations After Shifting From Conti-Based Locker
May 15, 2026 Gunra ransomware has quickly grown from a new threat into a serious global problem, hitting dozens of organizations in less than a year. The group behind it …